Legal
Cookies
Last updated 13 August 2026.
We use as few cookies as we can get away with. At the moment that means only the ones strictly necessary to run the site — which is why you have not been shown a consent banner. Under the UK's PECR rules, strictly necessary cookies do not require consent.
| Cookie | What it does | How long |
|---|---|---|
embassyhost_session |
Keeps you signed in and holds your session. Encrypted. | 2 hours, or until you sign out |
XSRF-TOKEN |
Protects forms against cross-site request forgery. | 2 hours |
remember_web_* |
Only set if you tick "keep me signed in". | Up to 5 years, or until you sign out |
What we don't do
We do not use advertising cookies, we do not run third-party tracking pixels, and we do not share your browsing with data brokers. If that ever changes we will ask you first, properly, with a real reject button — not a pre-ticked box.
Fonts
Our page typefaces are currently served by Google Fonts, which means your browser makes a request to Google when you load a page. We are moving these to our own servers so that stops happening.
Turning cookies off
You can block cookies in your browser settings. The strictly necessary ones above are what let you sign in, so blocking them will stop the dashboard working.